Latest news
As the tax season rolls in, so does the threat of cybercrime, and leading the charge in 2024 is the infamous TA576 threat actor
Apple has recently confronted a formidable challenge: a zero-day vulnerability within their groundbreaking product, the Apple Vision Pro
Orchestrated by the notorious APT28 group, this campaign was a masterclass in cyber deception and manipulation.
Recently, a significant vulnerability in ModSecurity versions 3.0.0 to 3.0.11, identified as CVE-2024-1019, has surfaced.
where cyber threats continually evolve, the rise of scripted ransomware marks a new era of digital extortion
If CVE-2024-21887 is used in conjunction with CVE-2023-46805, exploitation does not require authentication and enables a threat actor
Pawn Storm adopted a unique approach, sending spear-phishing emails with a small information stealer as an attachment
UNC4990 threat actor utilizes sophisticated tools like EMPTYSPACE, a versatile downloader, and QUIETBOARD, a multifunctional backdoor.
Crafted by the notorious Peach Sandstorm APT, the FalseFont backdoor has been specifically targeting defense contractors across the globe
These vulnerabilities, collectively identified under CVE IDs ranging from CVE-2024-22768 to CVE-2024-23842, have opened a backdoor
The MDR team’s subsequent investigation uncovered over 1,000 “MessageSent” Teams events linked to the external user
The GNU C Library (glibc), a fundamental component in major Linux distributions, has a critical vulnerability, CVE-2023-6246
Trustwave SpiderLabs has been closely monitoring an upsurge in the use of the Greatness phishing kit, a sophisticated phishing-as-a-service platform
A new threat actor, previously known as Trigona ransomware, has been identified as installing Mimic ransomware.
GRIT Ransomware Annual Report 2023 concludes with a forward-looking perspective, anticipating continued evolution in ransomware tactics
CVE-2023-41474 can be a gateway to more sinister activities. Unauthenticated attacker could access configuration settings and internal info
three security vulnerabilities have been identified in its systems, two of which are of critical (CVE-2024-22860 and CVE-2024-22862) severity
Ofuji Fishing disclosed a potential data breach involving personal customer information, a consequence of a ransomware attack
CVE-2023-6200, with a considerable CVSS score of 7.5, this flaw exposes a critical race condition within the handling of ICMPv6 packets
The privilege escalation vulnerabilities CVE-2024-21326 (CVSS 9.6) and CVE-2024-21385 (CVSS 8.3) were rated as 'Important.'
The Lazarus Group, a notorious name in the cyber espionage realm, has yet again drawn attention with its recent activities.